On 09/17/2014 08:29 PM, Tony White wrote:
    From unknown (HELO host-62.148-234-182.cable.dynamic.kbtelecom.net)
is from the email header.

As I suspected, that's the greeting name. spamdyke doesn't match on that, it matches on the rDNS name. You'll need to find the rDNS name for the sender's IP, which should be in the same header line immediately following the (HELO ...). You should also find the sender's IP in various places in the logs. I'd look for the corresponding spamdyke log message, so you know for sure what it's using.

I'm still a little surprised that this address, being dynamic (if indeed it is - it might very well have moved to a static address), wasn't rejected by an RBL. I'd say there's a good chance that it's really a static address now, and the server admin neglected to change the smtp greeting.

Thanks.

--
-Eric 'shubes'


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to